CVE-2013-3608 - CVE House
Back to Database
Status published Critical CVE-2013-3608

The web interface in the Intelligent Platform Management Interface (IPMI)...

Vulnerability Description

The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, and X9SR* devices allows remote authenticated users to execute arbitrary commands via shell metacharacters, as demonstrated by the IP address field in config_date_time.cgi.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-3608

Credits & Attribution

No credits recorded in the NVD database.

References

More from supermicro

View All →
CVE-2022-43309
Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered...
Unknown 0
CVE-2020-15046
The web interface on Supermicro X10DRH-iT motherboards with BIOS 2.0a...
High 8.8
CVE-2019-19642
On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS...
High 8.8
CVE-2019-16650
On Supermicro X10 and X11 products, a client's access privileges...
Critical 10
CVE-2019-16649
On Supermicro H11, H12, M11, X9, X10, and X11 products,...
Critical 10

Affected Vendor

Affected Software

h8dcl-6f, h8dcl-if, h8dct-hibqf, h8dct-hln4f, h8dct-ibqf, h8dg6-f, h8dgg-qf, h8dgi-f, h8dgt-hf, h8dgt-hibqf, h8dgt-hlf, h8dgt-hlibqf, h8dgu-f, h8dgu-ln4f\+, h8scm-f, h8sgl-f, h8sme-f, h8sml-7, h8sml-7f, h8sml-i, h8sml-if, x7spa-hf, x7spa-hf-d525, x7spe-h-d525, x7spe-hf, x7spe-hf-d525, x7spt-df-d525, x7spt-df-d525\+, x8dtl-3f, x8dtl-6f, x8dtl-if, x8dtn\+-f, x8dtn\+-f-lr, x8dtu-6f\+, x8dtu-6f\+-lr, x8dtu-6tf\+, x8dtu-6tf\+-lr, x8dtu-ln4f\+, x8dtu-ln4f\+-lr, x8si6-f, x8sia-f, x8sie-f, x8sie-ln4f, x8sil-f, x8sit-f, x8sit-hf, x8siu-f, x9dax-7f, x9dax-7f-hft, x9dax-7tf, x9dax-if, x9dax-if-hft, x9dax-itf, x9db3-f, x9db3-tpf, x9dbi-f, x9dbi-tpf, x9dbl-3f, x9dbl-if, x9dbu-3f, x9dbu-if, x9dr3-f, x9dr3-ln4f\+, x9dr7-ln4f, x9dr7-ln4f-jbod, x9dr7-tf\+, x9drd-7jln4f, x9drd-7ln4f, x9drd-7ln4f-jbod, x9drd-ef, x9drd-if, x9dre-ln4f, x9dre-tf\+, x9drff, x9drff-7, x9drff-7\+, x9drff-7g\+, x9drff-7t\+, x9drff-7tg\+, x9drff-i\+, x9drff-ig\+, x9drff-it\+, x9drff-itg\+, x9drfr, x9drg-hf, x9drg-hf\+, x9drg-htf, x9drg-htf\+, x9drh-7f, x9drh-7tf, x9drh-if, x9drh-itf, x9dri-f, x9dri-ln4f\+, x9drl-3f, x9drl-ef, x9drl-if, x9drt-f, x9drt-h6f, x9drt-h6ibff, x9drt-h6ibqf, x9drt-hf\+, x9drt-ibff, x9drt-ibqf, x9drw-3ln4f\+, x9drw-3tf\+, x9drw-7tpf\+, x9drw-itpf\+, x9drx\+-f, x9qr7-tf, x9qr7-tf\+, x9qr7-tf-jbod, x9qri-f, x9qri-f\+, x9sbaa-f, x9sca-f, x9scd-f, x9sce-f, x9scff-f, x9sci-ln4f, x9scl\+-f, x9scl-f, x9scm-f, x9scm-iif, x9spu-f, x9srd-f, x9sre-3f, x9sre-f, x9srg-f, x9sri-3f, x9sri-f, x9srl-f, x9srw-f
Vulnerable Versions:
Unknown

Timeline

Official Publish: September 8th, 2013
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.